VocaReader App Logo

Welcome to VocaReader!

Account
LegalPrivacy PolicyTerms of Use

Privacy Policy

This is a translation of the German Privacy Policy. In case of discrepancies, the German version prevails.

1. Controller

The data controller responsible for the processing of personal data in connection with VocaReader is:

Tobias Jahn
Niederbottigenweg 91
3018 Bern
Switzerland
vocaby.reader@gmail.com
+41 76 22 66 149

For any questions regarding data protection, please contact me directly using the details above.

2. Scope

This Privacy Policy applies to the iOS and Android app VocaReader as well as to the website and APIs hosted on eduquent.com and its subdomains.

3. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights. To exercise them, please contact me at the address above.

  • Right of access (Art. 15 GDPR) – the right to obtain a copy of your personal data and information about how it is processed.
  • Right to rectification (Art. 16 GDPR) – the right to have inaccurate personal data corrected.
  • Right to erasure (Art. 17 GDPR) – the right to have your personal data deleted, subject to legal retention obligations.
  • Right to restriction of processing (Art. 18 GDPR) – the right to request that processing of your data be restricted.
  • Right to data portability (Art. 20 GDPR) – the right to receive your data in a structured, machine-readable format.
  • Right to object (Art. 21 GDPR) – the right to object to processing based on legitimate interests.
  • Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
  • Right to lodge a complaint (Art. 77 GDPR) – you have the right to lodge a complaint with a data protection supervisory authority at any time if you believe that the processing of your personal data violates the GDPR.

4. Data Processing

4.1 Account and Login

You can use VocaReader without creating an account. In that case, your books, flashcards and progress stay on your device only; no account and no login session are created.

If you choose to create an account, login is handled via Google Sign-In or Sign in with Apple, both processed through Firebase Authentication (Google LLC). I only request the minimum data necessary to identify your account: name and email address as provided by the respective sign-in provider. This data is stored securely and used exclusively to identify you and provide my services.

With an account, VocaReader syncs your data through my server (hosted in Germany) so that it is available on all your devices and backed up: the entries of your library (title, author, language, chapter and reading position, not the book files themselves), your flashcards (the word, the sentence from the book it comes from, translation, examples and learning state) and your reading and learning history (when and how long you read and practised). This data is used only for syncing and for the statistics shown to you in the app, and kept until you delete your account.

You can delete your account in the app (Settings → Danger Zone) or without the app at https://api.sync.vocareader.eduquent.com/home. All synced data is then deleted immediately. To complete the deletion safely, a technical account identifier (without name or email) is kept for up to two hours and then deleted as well.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Firebase is a service of Google LLC. For more information, see Google's Privacy Policy at policies.google.com/privacy. For Apple's privacy policy, see apple.com/legal/privacy.

4.2 Flashcard Generation (AI Services)

When you tap a word to create a flashcard, VocaReader sends the word and the sentence around it, together with your two languages, to my server, which asks an external AI service (Mistral AI SAS, Paris, France) to generate the flashcard. Mistral AI receives only this text, never your name, email address or any identifier. My server checks your daily limit with your account ID (or, without an account, your IP address); this is not passed on.

Flashcards are generated automatically and may contain mistakes.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract / provision of the requested feature).

For further information, see Mistral AI's Privacy Policy at mistral.ai/terms.

4.3 Contact Requests

If you contact me by email or telephone, your enquiry including any personal data it contains (name, phone number, message content) is stored and processed solely for the purpose of handling your request. I retain this data until you request deletion, withdraw your consent, or the purpose of storage no longer applies. I do not share this data with third parties without your consent.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

4.4 Crash Reporting

When the app crashes or an error occurs, VocaReader uses Firebase Crashlytics (Google LLC) to send a crash report with the device model, OS version, app version, a stack trace and a random installation ID, but not your name or email address. Google deletes crash reports after 90 days. Crash reporting is switched on by default and can be switched off at any time in Settings → Privacy.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in finding and fixing errors that make the app crash). You can object at any time by switching it off in Settings.

4.5 Firebase Analytics (optional)

If you opt in, VocaReader uses Firebase Analytics (Google LLC) to understand how the app is used, for example which screens are opened and how many flashcards are created. Google receives usage events, device and app information and a random app instance ID, but not your name, email address or the texts you read, and keeps this data for at most 14 months. Collection is disabled by default and can be switched off at any time in Settings → Privacy.

Legal basis: Art. 6(1)(a) GDPR (consent).

4.6 Problem Reports

If you send a problem report from the app (Settings → Report a problem), your message is sent through my server to me by email, together with your user ID or, without an account, your IP address, and the email address in the report's email field if you leave it filled in (signed-in users find their account email there), so that I can answer you. If you leave "include details" switched on, the report also contains the app version, platform, app language, whether you are signed in, the sync status and a recent technical log of the app, which may include book titles. I use this information only to fix the problem and delete the report at the latest 12 months after the problem is solved.

Legal basis: Art. 6(1)(b) GDPR (support for the service you use) and Art. 6(1)(f) GDPR (legitimate interest in a working app).

4.7 Server Logs

Access to the VocaReader backend servers is logged temporarily for the purposes of service provision, infrastructure optimisation, and security monitoring. IP addresses are only evaluated in the event of an attack on the infrastructure. Log data is retained for a maximum of 12 months and then deleted. The logged data includes:

  • The requested URL
  • The amount of data transferred
  • The IP address of the requesting device
  • The time of access
  • The client software (browser / operating system)

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation of the service).

5. Third-Party Providers and International Data Transfers

I use selected external service providers to operate VocaReader. Some of these providers are based outside the European Economic Area (EEA), in particular in the United States. For such transfers, I rely on appropriate safeguards to ensure an adequate level of data protection:

  • Netcup GmbH (Germany) – Hosting of this website and the VocaReader backend APIs. Data remains within the EEA.
  • Google LLC (USA) – Firebase Authentication, Firebase Crashlytics (can be switched off), Firebase Analytics (only if opted in), and Gmail for delivering problem reports by email. Google LLC participates in the EU-US and Swiss-US Data Privacy Framework (DPF), providing an adequate level of data protection for transfers to the US (Art. 45 GDPR).
  • Apple Inc. (USA) – Sign in with Apple. Apple Inc. participates in the EU-US and Swiss-US Data Privacy Framework (DPF).
  • Mistral AI SAS (France) – AI-assisted flashcard generation (only the word and its sentence, no personal data), under a data processing agreement. The data is processed in the EU.

6. Minimum Age

VocaReader is intended for people aged 16 and over. Younger users may use it only with the consent of a parent or guardian.

Last updated: October 2026